$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa File: 27e837bc-6779-3e9e-9867-843d0a93bf0f.roa (raw, json) Hash identifier: WpvsdriDIG2cZSFQlbyVQMB8Pdpd+ta9WSGFgwJE2pM= Subject key identifier: AC:4A:BB:6B:91:41:10:DD:4A:1C:2E:07:40:99:2F:D8:91:2C:C1:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4B3B5CD17CF3AB143280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4b:3b:5c:d1:7c:f3:ab:14:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=3da2cc8e-08fe-4f93-995f-707f747ff025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:ab:57:61:c1:68:a4:13:cb:22:bf:aa:bb: 63:00:b6:0b:64:0e:1c:dc:29:ec:2f:15:10:14:1e: 5e:0b:a9:b9:98:2f:2a:a8:bb:30:73:eb:e1:57:65: fa:49:1e:c9:ae:70:78:a7:3d:bf:29:7a:14:a1:a1: 45:35:b2:d3:4b:b4:f5:b9:26:16:c6:1c:66:35:33: e2:fa:bd:d7:64:43:ac:97:42:4e:6f:d5:df:c3:d6: b2:af:00:d8:8f:cf:33:8a:72:8b:f4:25:77:75:c9: 79:d1:d2:d7:cd:48:f2:e9:f2:6a:9b:63:9d:8f:f9: 23:b1:bc:59:0a:f5:4b:4f:f8:e4:56:56:78:5b:54: 38:9c:3f:62:0a:e1:67:56:1e:22:81:7c:6d:cb:42: 29:15:98:9e:ea:8e:f0:2a:c7:d2:57:f4:9f:a6:d6: f7:2c:e0:25:c7:9a:fe:92:22:10:95:ff:30:35:49: 28:e7:6c:77:d6:f9:66:ea:99:90:53:3d:84:59:32: 33:8c:db:82:5c:29:56:13:d7:f7:1a:e9:4c:c2:f6: 6d:ab:65:86:4c:5c:c9:48:05:f2:24:23:b3:64:b4: 1d:53:3c:25:c8:16:ff:c9:ab:5e:06:cc:65:35:2b: 9c:91:31:72:75:3b:fb:86:d8:91:94:93:d0:ad:3c: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4A:BB:6B:91:41:10:DD:4A:1C:2E:07:40:99:2F:D8:91:2C:C1:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ca:0a:55:b5:11:7e:1a:29:7b:50:2f:e7:9f:c8:3c:39:62: 53:b0:78:2e:fa:0b:c0:0f:0e:a8:67:42:29:a7:25:a2:8e:ca: 1b:61:91:23:57:8d:97:4c:10:a6:b3:12:87:51:5d:d1:3e:74: 3b:5a:fa:5f:36:47:1d:d2:1c:0b:20:27:59:d0:b7:34:39:69: 19:0f:95:fd:c0:2b:8d:75:5b:e4:f4:45:e0:ea:15:aa:57:5d: b3:94:2b:b8:b0:f5:9d:37:d3:04:1f:ad:38:e7:c5:ab:75:43: 30:e0:c8:fa:0f:aa:78:79:c0:c1:c2:a1:47:81:c4:91:e3:cc: 89:dc:09:ac:a2:32:90:76:de:72:54:68:74:ed:33:fd:7d:ed: 82:f7:20:7b:d1:48:b5:0b:bf:ed:3f:8f:0c:c2:0c:d1:41:d6: dd:23:17:cf:ce:e1:74:03:b0:be:a2:b4:47:b8:47:a7:22:9a: 55:12:7a:e1:76:b1:8a:9b:19:b4:ad:52:12:03:7c:5a:07:c9: 12:36:17:ca:36:0f:03:d5:c3:8e:2b:e6:96:f3:d7:50:7e:b6: 8a:70:6b:55:80:80:ac:64:6b:30:58:27:2a:65:d5:21:c3:b8: 81:70:21:20:e6:51:34:2b:c0:a4:fd:da:cd:9e:df:8d:96:62: e8:44:22:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUs7XNF886sUMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk M2RhMmNjOGUtMDhmZS00ZjkzLTk5NWYtNzA3Zjc0N2ZmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHOrV2HBaKQTyyK/qrtjALYLZA4c3CnsLxUQ FB5eC6m5mC8qqLswc+vhV2X6SR7JrnB4pz2/KXoUoaFFNbLTS7T1uSYWxhxmNTPi +r3XZEOsl0JOb9Xfw9ayrwDYj88zinKL9CV3dcl50dLXzUjy6fJqm2Odj/kjsbxZ CvVLT/jkVlZ4W1Q4nD9iCuFnVh4igXxty0IpFZie6o7wKsfSV/Sfptb3LOAlx5r+ kiIQlf8wNUko52x31vlm6pmQUz2EWTIzjNuCXClWE9f3GulMwvZtq2WGTFzJSAXy JCOzZLQdUzwlyBb/yateBsxlNSuckTFydTv7htiRlJPQrTxObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxKu2uRQRDdShwuB0CZL9iRLME2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjdlODM3YmMtNjc3OS0z ZTllLTk4NjctODQzZDBhOTNiZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnKClW1EX4aKXtQL+efyDw5YlOweC76C8APDqhnQimnJaKOyhthkSNX jZdMEKazEodRXdE+dDta+l82Rx3SHAsgJ1nQtzQ5aRkPlf3AK411W+T0ReDqFapX XbOUK7iw9Z030wQfrTjnxat1QzDgyPoPqnh5wMHCoUeBxJHjzIncCayiMpB23nJU aHTtM/197YL3IHvRSLULv+0/jwzCDNFB1t0jF8/O4XQDsL6itEe4R6cimlUSeuF2 sYqbGbStUhIDfFoHyRI2F8o2DwPVw44r5pbz11B+topwa1WAgKxkazBYJypl1SHD uIFwISDmUTQrwKT92s2e342WYuhEIgk= -----END CERTIFICATE-----Generated at Wed Sep 23 02:31:56 2026 by rpki-client